fixed a few password bugs